CVE-2019-19994

2020-02-2615:03:43

mitre

www.cve.org

10 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.8%

JSON

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system command by injecting the vulnerable parameter in the PHP Web page /common/vam_monitor_sap.php.